skysight-inc/HackerNews huggingface dataset:
>it seems to make a lot more sense from a development standpoint to have CentOS Stream

For many scenarios it does. It gives far more visibility into what's coming in future RHEL releases than a downstream rebuild of past point releases did. However, a lot of people are used to those backward looking point releases because "that's the way we've always done things."(tm)

I also imagine that many of the same people think nothing of using cloud platforms and services that are getting changed many times a day--but those changes are invisible for the most part so it doesn't bother them.

I'm not sure beta test is all that meaningful a term in a CI/CD world. Yes, there is final acceptance testing for official releases but a lot of software we use is basically changing all the time.
WSB are the old stock forums / discussion boards on steroids. Back in the day, people used to pump stocks on these smaller discussion boards. Difference is, WSB has 10^6 more members. And everyone can trade via Robinhood these days.
I think when a company becomes a major communication platform for over a billion users and purchases competitors they are no longer “just a private company” and it isn’t practical to “just use something else”
The correct URL for the Firefox Send instance is https://send.vis.ee/
Yes, and automation is very difficult to use for these tasks. Running such huge infrastructure can benefit in many ways by automation, just look at netflix.

But it doesn't function well in these cases, and again and again it's clear these companies can't employ enough people and tools to prevent blantly illegal content (to the point many of those hired to review potential illegal material come away from that job with PTSD) much less identify and moderate hate speech or even speech that is more nuanced.

Reddit did some stuff right with sub moderators, but even then its a whole charlie-foxtrot when the moderators encourage it or aren't active (and thats excluding ones with their own specific agendas).

At this scale, these companies cannot moderate their platforms properly, and automation could help, but isn't the solution until ot greatly improves.
"I'm still trying to imagine the way one exploits a lack of partitioning in the DNS cache."

There's a PDF here: https://www.ndss-symposium.org/wp-content/uploads/2019/02/nd...

Basically timing based. See https://www.audero.it/demo/resource-timing-api-demo.html for a demo of what's available in the browser's navigation and resource timing API. For example, I get this on a cached reload:

domainLookupStart: 52.090000128373504

domainLookupEnd: 52.090000128373504

The PDF explains some enhancements that make it more reliable, like publishing multiple A records and watching order, etc. Also, the demo link isn't really showing what you would do...the resource being downloaded would be marked as non-cacheable so that you would be measuring "DNS lookup was cached or not" instead of "Entire Asset was cached, therefore no DNS lookup happened".
privacy.firstparty.isolate :)
Eh, Google was first to implement this: https://developers.google.com/web/updates/2020/10/http-cache....
I know that they're not always the most available, but I find it interesting that they don't purchase _any_ Fujitsu drives.

After an experiment with their helium-filled drives, I've gone all-in to great success.
No. You can track users across sites with the HTTP cache without running any JS.
I would imagine previous generation tape drives (used) can be economical. Just need to find a reliable place that handles testing / refurbishing (cleaning, alignment, belts, etc) used drives. Also the other bit item is needing the appropriate controller and cabling.
It doesn't work that way, especially with student debt. If I were a child and could choose, it might make sense to choose Canada. But children don't usually get to choose. When do you choose? For many people, when they graduate from college. At that point, you're from Canada and don't have student debt. Great! Wonderful!

But the salary is still higher in America. So you can go to America without the student debt, and still get the higher salary. And why not? (You could think of this as arbitrage between two ways of structuring society economically.)

But maybe the thing to do is to go back to Canada when you have kids, so that their university won't load them down with student debt.
Try AskGit SQL in the Browser
Au contraire I feel like drive reliability has gone _down_... Especially for consumers - the big difference between Blackblaze and regular users is that they have their disks spinning continuously, and the reliability numbers seem to only apply in that scenario. If you switch off and store a drive my experience is that after a year it's very high probability it won't switch on again. This is a big problem in academic labs where grad students generate terabytes of data and professors and departments are too stingy to provide managed storage services in that scale so it all sits in degrading drives in some drawer in the lab.
Agreed. What is it that people are doing (or not doing) where a simple managed k8s cluster is more work than the minimum way to do this?

Are teams not even setting up automated builds and just sshing into a box?
>Also look into LTO tape drives. LTO 6 drives should be cheaper than 7/8 (though still not cheap) and have a capacity around 6TB.

AFAIK a post on /r/datahoarders says that the breakeven point for tapes vs shucked hard drives from a pure storage perspective is around 50TB. Given the hassle associated with dealing with tapes, it's probably only really worth it if you have 100+TB of data to store.
I don't know about others but when I click youtube links on reddit the back button is disabled. Not sure if it's a bug or by design but I don't remember it always being that way.
DMs are indeed private conversations. Facebook even markets them as such.
But but but, what about my boilerplate frontend code to add zillions of trackers. Do I have to stop copy-pasting those? Too hard, GDPR sucks. :))
if this is important to some users (to me it is) why blindly trust an application's claim of what it does without verifying/restricting it[1]? The IMHO logical step for a user (again most don't care) would be to sandbox the application with a precise set of calls that are whitelisted and judge the application not based on trust but based on what they allowed in their security controls (firejail, apparmor, seccomp, SElinux, ...) and so immediately see if they did something different (that breaks the promise/trust)? (even then browsers have million lines of code so even with best intentions ymmv)

Reading/writing clipboards is a problem for sandboxing since they act as a bridge to another layer that otherwise has no contract or understanding of the application. So are many other features not just on browsers but on any application that for some reason needs to handle a gazillion tings (on Linux subscribing to system/user dbus messages is a big issue and out of the box totally unmitigated).

[1] If a monolith like chrome/firefox needs to understand/parse hundreds of protocols, technology-standards, etc, is a challenge to sandbox, maybe it isn't the sandboxing but the application that is the wrong tool for the users threat-model? Note, there is also Tor/Tails/QubesOS if isolation between user-space applications is a serious concern.
The thing I miss most in Firefox is the Smart Bookmarks feature they removed a while ago. Smart Bookmarks were fantastic. Add your favorite sites' RSS feeds to your bookmark toolbar and you'd have all the recent headlines from all your favorite sites at one click. Fortunately I wasn't the only one that appreciated this long neglected feature so someone created Livemarks (https://github.com/nt1m/livemarks/) that mostly replicated its functionality, but it's not quite the same as having native support for them.
It's a trade off. You don't want to write all your types for quick scripts, data analysis and small web sites.

As a trainer, experience teaches me that it's also much easier for beginners.

Now, types are nice to have for bigger code bases, but that doesn't mean there is no place for a language with optional typing.
At least when I was involved in shipping you could do both from a UPS account - but every company doing major shipments has more than one shipment supplier anyway.
You can whitelist yes, or there's an option to disable the entire thing temporarily for x minutes.

Yes you have to log in to the interface unless you engineer a way around it
Interestingly, no, it isn't fully explained as of today. Schopenhauer's quote of "Any foolish boy can stamp on a beetle, but all the professors in the world cannot make a beetle" is still true today.

No, starting from beetle eggs does not count. They point is no one knows how to start from the inert chemicals that make up a beetle and cause them to assemble into a living beetle. More generally, abiogenesis has not been cracked.
For my particular issue I wasn't too put out. If I had wanted faster service I probably could have paid out of pocket to get it.

The point is, the system works. I never have to really worry about healthcare or its costs.
Yes, I agree.

Do you have more information about how iOS is blocking fingerprinting?
allowlist/denylist
I am looking at the lawsuits and articles linked from Navarro's report. The lawsuits sound pretty credible to me. When I read the court's reason for rejecting the lawsuit it sounds like the judge is looking for technical reasons to reject the lawsuit.

When I look for articles explaining why the lawsuits are rejected en mass, every article I have found is very hand wavy, stating the judges are appointed by Trump so we should expect them to be unbiased. However, no one actually dogs into the opinions or takes the reason why the election seems highly suspicious seriously.

To pick out one specific piece of evidence, in PA they found 200k more votes than voters, which is more than enough to change the result for that state. The counts are all from state government databases.

http://www.repdiamond.com/News/18754/Latest-News/PA-Lawmaker...

Navarro has over 50 such claims linked in his report, totalling over 3M potentially fraudulent votes. Regardless of what you think of the man, the evidence itself I find hard to set aside, even though I am like you and would tend towards dismissing Navarro as a partisan hack. But when he has laid out the claimed evidence like this in detail I must at least give it a spot check and the spot checks hold up so far.
HTTP 1.1 is faster when you're not downloading megabytes of JS. I rarely browse AMP sites but when I do I'm amazed at how user hostile they are compared to a strictly filtered browsing experience.
Consent needs to be unambiguous. If they assume consent, they operate illegally.
I think the problem is that these AI solutions should integrate at a lower level. Instead of a giant brain that does everything (and screws it up), just give people ML based tools... and let people hook them up and decide what they need.
I remember now I actually watched a bit of Season 3 and then quit, it wasn't Season 2 that made me quit per se. I did like Season 2 for its portrayal of BBSs, since I never did get in on that.
Yes, you have to login to disable but you could easily use the API. For instance, pihole.disable(60) with https://pypi.org/project/PiHole-api/
Maybe so. But the people paying for the prison certainly do. And they have the purse strings to impose things on their vendors.

The profit motive cuts both ways.

Good money steward, good outcomes.
Checked out steward...
How to create React components with TypeScript
FWIW, I agree with you.

I don't agree when insurrection and violence is deemed 'political activism' or 'free speech' in countries like Iran, China, North Korea, etc.
If Firefox is installed by another user (or even by yourself) on Windows, the Mozilla Maintenance Service is installed to automatically update Firefox without requiring you to personally elevate the installer.

I'd argue updates are legitimately necessary for 99% of users (automatic updates are a huge reason why 90% of home PCs aren't in a botnet, and were a big reason why Chrome more secure in the old days vs IE/Firefox), and if you want to disable them it's very easy to do (about:config -> app.update.auto = false). But I don't know why you would, if the browser is changing too much for you you can change to ESR which is security updates only to older versions of Firefox.

https://wiki.mozilla.org/Windows_Service_Silent_Update
It is ironic that you accuse me of "unwarranted conclusions". I've been customizing and modifying PostgreSQL internals for almost two decades, I know how to read the source. You aren't as familiar with PostgreSQL as you think you are.

This wasn't my problem, I was asked by a well-known company with many large PG installations and enterprise support contracts to look at the issue because no one else could figure it out. The limitations of the statistics collector are not only evident in the source but they are documented there. There are also deep architectural reasons why you can't trivially modify the statistics collector -- I looked into this option -- to work for larger tables without introducing other serious issues.

If you have a uniform distribution of values, the statistics collector will work fine. In the above case, the values followed a power law distribution which created extreme biases in the statistical model due to necessary restrictions on sampling. Other distributions can have similar effects once you exceed the ability of the statistics collector to acquire a representative sample.
Fascinating. I wonder what happened to Medium?
Numerators without denominators aren't too useful. How much total revenue did these creators represent?
I just stop using sites that gimp themselves when I use an adblocker. There's tons of alternatives for most things.
no it’s not. i’m talking about covered calls which is where you sell a call against your shares. you collect the premium from the option in exchange for potentially limited upside if your sold call goes in the money at the time of expiration.
I stopped using Dropbox as soon as C. Rice was put on the board. Tried tarsnap which was great did everything I wanted but I ended up using Arq instead, have had zero issues with it.

https://www.arqbackup.com/
Go to google, type something in, then try to select the text by click-dragging right to left, but keep dragging until the cursor is over the Tree Style Tabs, then release.. the page will not have registered the release and if you move the cursor over the page again it will deselect what you have just selected.

Sounds like just a nuisance, and it is, but i use quick-keys with my mouse and it really messes with my workflow.
From the article: " These impacts are similar to those reported by the Chrome team for similar"
Surely male and female also require targeting? It's not as if browsers come in pink and blue editions and broadcast that.
Actually, manual lathes and mills tend to keep their value. You can often find century old machines in reasonable condition.
By law or it has to be informed, active consent AIUI. Some sites say 'by continuing you are giving consent' but that's not how it works.

You have to be able to use the site without giving consent too.
WebAuthn is a framework. A quick search shows that Beyond Identity uses WebAuthn, FIDO, and other identity management flows and standards.
I usually don't really read about the shows I watch, I just go with it. So I saw it as Joe needing to get something out of his system, and he evolves after that. Though he never really stops being Joe. It worked for me.
News is a business. All news is fake news, fueled by PR.

You're a centrist with a throwaway account. I don't know what to say to that.
If you want to go back and forth between release and beta on a single profile, that’s not recommended. If you want to switch your current beta profile permanently to an installation of the stable release, you can do that from the terminal (command line) by running the Firefox executable with the -p parameter to select a profile. The documentation has instructions on where the profile is located and how to find which profile is used.
Google Pressed in Lawsuit to Dump Telegram Just Like Parler
"We value your privacy" has never been truer.
How many of those documentaries on Netflix are exclusive to that platform, debuted on that platform, are popular Sundance movies, and from an Oscar winning filmmaker that wants to charge $20 for renting the movie? It isn't like there is a set price for every documentary. This movie was always going to come with a relatively big price tag compared to its financial viability.

I am not ignoring the politics of the situation. I simply said I don't know if the tale told in the article is believable because there are valid non-political reasons that seem to do a better job explaining what transpired.
Its hard to say for sure, IMO. Greenlots seems to have lost some locations in my state since the Shell acquisition.
No multiline lambda is a feature. It is convenient enough to use it like in

sort(items, key=lambda x: x.size)

but really anything much bigger should have a name stamped on it dammit. I find JS largely unintelligible due to lambda overuse and nesting.
FIOS Here in the Philadelphia area, having issues hitting AWS as well.
> Of course there will be issues, on both sides.

Yet for now one side seems a lot less prepared than the other one.

> And on a more theoretical level, if the EEC had continued as-is and hadn't transformed itself into a political union then we probably wouldn't have had Brexit. So who's to blame?

Sorry? Then why not join under Shengen's deal like Switzerland? Nothing to do politically with the UE, same rules and duty as the EEC used to have with some right removed. But Shengen dealt exclusively with trade and movement.

Who's to blame? People that never thought about "what would happen if..." and voted anyway. Who will suffer? Always the same.
Looks like it's Verizon having trouble.
duplicate

https://news.ycombinator.com/item?id=25917798
Today, probably the ESP32 is the most bang for the buck - unless there's something more cost competitive and equally widespread, which didn't come to my mind.

Notably, an ESP32 based on RISC-V is due shortly, with an expected price of $1. Wifi, BT5+BLE, 400KB ram (which may not be enough for everybody, but it's close), 22 GPIO's, a single 32-bit RISC-V core running at 160Mhz.

https://www.cnx-software.com/2020/12/20/esp32-c3-wifi-ble-ri...
OT: Several commenters have mentioned both their oven clocks and microwave clocks getting out of sync. I'm curious as to why people set both of these clocks in the first place.

The microwaves and ovens I've seen do not actually require you to set the clock. None of their cooking features and functionality depends on it. It's just a convenience feature. I doubt that most people actually need two clocks in the kitchen, so why not just set one of them (or neither if you don't need a kitchen clock at all)?
SRGB gamut clipping – a better alternative to clipping RGB values
Fujitsu sold their disk drive business to Toshiba in 2009, didn't they?
Spikes everywhere https://downdetector.com/
Yep, on verizon fios just outside baltimore. Can't ping 8.8.8.8, but can ping 1.1.1.1 fine. Also having issues connecting to services running in AWS.
Bullshit. It's really very simple: you just use something else.

If that doesn't work for you because you really really need access to the userbase of Facebook, well, that just shows that they've done a really good job building what people want because that's where the people are. It isn't like people can't be on multiple social networks, there's no natural monopoly here.
And it's more commercially effective to be more specific than that and take the reader's profile into account.

It's also not a zero sum at all. An advertisement that is not within the user's interest is wasted, rather than going to the competitor.
That idea of having JS files hosted elsewhere always struck me as a Girardian scam (e.g. "everybody else does it") and always getting voted down when I showed people the reality factor.

Nobody seemed to think it was hard to host a file before this came along, just as nobody thought it was hard to have a blog before Medium.

Of course this creates the apocalyptic possibility that one of these servers could get hacked (later addressed with some signing) but it's also not easy to say you're really improving the performance of something if there is any possibility you'll need to do an additional DNS lookup -- one of the greatest "long tails" in performance. You might improve median performance, but people don't 'experience' median performance in most cases (it goes by too fast for them to actually experience it), they 'experience' the 5% of requests that are the 95% worst, and if they make 100 requests to do a task, 5 of them will go bad.

People are miseducated to think caching is always a slam dunk and sometimes it is but often it is more nuanced, something you see in CPU design where you might "build the best system you can that doesn't cache" (and doesn't have the complexity, power and transistor count from the cache -- like Atmel AVR8) to quite a bit of tradeoff when it comes to 'computing power' vs 'electrical power' and also multiple cores that see a consistent or not view of memory.
Point #1, there is a world of difference between a reporting database and a transactional database. If you need a reporting database, ship logs and set up a reporting database separate from your transactional one. That solves most of the problem.

Point #2, the fact that you've hit performance problems does not mean that you need to distribute. Every real system that I've seen has had order of magnitude performance improvements left when it first looked like it was topping out. Add a caching layer, have better indexes, more targeted queries, appropriate use of window functions, etc. Give those a try before biting the bullet on distributed data.

Point #3, here is a good rule of thumb for distributed systems. Whatever scale you hit on a single machine, you can probably gain 1-2 orders of magnitude of performance by switching to a faster language and carefully optimizing. If you switch to distributed, you'll LOSE at least an order of magnitude performance due to the overhead of RPCs, but are able to scale indefinitely afterwards.

If you're distributing for reliability, great. But if you're distributing for performance and you have less than 20 machines in your system, either your problem is embarrassingly parallel or you likely aren't achieving a net win.

I've seen a lot of people prematurely distribute, run into performance challenges, solve them, then pat themselves on the back for being smart enough to have distributed their code. While failing to recognize that they were addressing a self-inflicted injury.
Somewhere in Ankara, a not-so-slightly fascist is giggling hard.

To have the west's narrative-forming-class believe the fairy tale of Kashoggi as a fighter for free speech is quite an achievement, as the only reason Kashoggi got to be a politically critical journalist in Saudi-Arabia was that he was an upper class guy, heir to millions of USDs - and like many in this socio-economic group a big fan / member of the Muslim Brotherhood (as means to overthrow the only class that sits on top of them).

Yeah, just an ordinary freedom fighter who is best buddies with Erdogan. Right...
let's also not forget that firefox has spent the last few years aggressively investing in anti-fingerprinting tech
IMO, the concern isn't so much dismantling it as mismanaging it. Some of these charge networks are moving to REALLY unattractive pricing models.